high7.5
CVE-2020-24143
Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored ou…
Impact
Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored outside the web root folder via the njt-tk-download-video parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ninjateam | Video Downloader For Tiktok | Version 1.3 |